
CVE catalog
CVE-2026-3833
A flaw was found in gnutls. This vulnerability occurs…
A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of `nameConstraints` labels, specifically for `dNSName` (DNS) or `rfc822Name` (email) constraints within `excludedSubtrees` or `permittedSubtrees`. A remote attacker can exploit this by crafting a leaf certificate with casing differences in the Subject Alternative Name (SAN), leading to a policy bypass where a certificate that should be rejected is instead accepted. This could result in unauthorized access or information disclosure.
- Severity
- Medium · CVSS 6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.56% · Oct 27, 2026
Projects and upstream resources
Reported versions and fixes
Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.
Version impact has not been established. The original provider fields are retained below.
Provider details and historical evidence
Original provider fields
{
"package_releases": [
{
"name": "gnutls28",
"status": "fixed",
"release": "sid",
"version": "3.8.13-1"
},
{
"name": "gnutls28",
"status": "fixed",
"release": "forky",
"version": "3.8.13-1"
},
{
"name": "gnutls28",
"status": "fixed",
"release": "trixie",
"version": "3.8.9-3+deb13u4"
},
{
"name": "gnutls28",
"status": "fixed",
"release": "trixie-security",
"version": "3.8.9-3+deb13u4"
},
{
"name": "gnutls28",
"status": "fixed",
"release": "bookworm",
"version": "3.7.9-2+deb12u7"
},
{
"name": "gnutls28",
"status": "fixed",
"release": "bookworm-security",
"version": "3.7.9-2+deb12u7"
}
],
"fixed_versions": [
{
"bug": 1135319,
"name": "gnutls28",
"type": "source",
"origin": null,
"release": "sid",
"urgency": "not yet assigned",
"fixed_version": "3.8.13-1"
},
{
"bug": 1135319,
"name": "gnutls28",
"type": "source",
"origin": null,
"release": "forky",
"urgency": "not yet assigned",
"fixed_version": "3.8.13-1"
},
{
"bug": 1135319,
"name": "gnutls28",
"type": "source",
"origin": null,
"release": "trixie",
"urgency": "not yet assigned",
"fixed_version": "3.8.9-3+deb13u4"
},
{
"bug": 1135319,
"name": "gnutls28",
"type": "source",
"origin": null,
"release": "bookworm",
"urgency": "not yet assigned",
"fixed_version": "3.7.9-2+deb12u7"
}
],
"distribution_packages": [
{
"name": "gnutls28",
"ecosystem": "cpe",
"fixed_version": "3.8.3-1.1ubuntu3.6"
},
{
"name": "gnutls-bin",
"ecosystem": "cpe",
"fixed_version": "3.8.3-1.1ubuntu3.6"
},
{
"name": "gnutls-doc",
"ecosystem": "cpe",
"fixed_version": "3.8.3-1.1ubuntu3.6"
},
{
"name": "libgnutls-dane0t64",
"ecosystem": "cpe",
"fixed_version": "3.8.3-1.1ubuntu3.6"
},
{
"name": "libgnutls-openssl27t64",
"ecosystem": "cpe",
"fixed_version": "3.8.3-1.1ubuntu3.6"
},
{
"name": "libgnutls28-dev",
"ecosystem": "cpe",
"fixed_version": "3.8.3-1.1ubuntu3.6"
},
{
"name": "libgnutls30t64",
"ecosystem": "cpe",
"fixed_version": "3.8.3-1.1ubuntu3.6"
},
{
"name": "gnutls",
"ecosystem": "cpe",
"fixed_version": ""
},
{
"name": "hardened_images",
"ecosystem": "cpe",
"fixed_version": ""
},
{
"name": "openshift_container_platform",
"ecosystem": "cpe",
"fixed_version": ""
},
{
"name": "enterprise_linux",
"ecosystem": "cpe",
"fixed_version": ""
},
{
"name": "gnutls",
"ranges": [],
"ecosystem": "cpe",
"fixed_version": "",
"provider_record_id": "NVD-CVE-2026-3833"
},
{
"name": "hardened_images",
"ranges": [],
"ecosystem": "cpe",
"fixed_version": "",
"provider_record_id": "NVD-CVE-2026-3833"
},
{
"name": "openshift_container_platform",
"ranges": [],
"ecosystem": "cpe",
"fixed_version": "",
"provider_record_id": "NVD-CVE-2026-3833"
},
{
"name": "enterprise_linux",
"ranges": [],
"ecosystem": "cpe",
"fixed_version": "",
"provider_record_id": "NVD-CVE-2026-3833"
},
{
"name": "gnutls",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.8.13-r0"
}
]
}
],
"release": "3.20",
"versions": [],
"ecosystem": "apk",
"fixed_version": "3.8.13-r0",
"provider_record_id": "ALPINE-CVE-2026-3833"
},
{
"name": "gnutls",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.8.13-r0"
}
]
}
],
"release": "3.21",
"versions": [],
"ecosystem": "apk",
"fixed_version": "3.8.13-r0",
"provider_record_id": "ALPINE-CVE-2026-3833"
},
{
"name": "gnutls",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.8.13-r0"
}
]
}
],
"release": "3.22",
"versions": [],
"ecosystem": "apk",
"fixed_version": "3.8.13-r0",
"provider_record_id": "ALPINE-CVE-2026-3833"
},
{
"name": "gnutls",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.8.13-r0"
}
]
}
],
"release": "3.23",
"versions": [],
"ecosystem": "apk",
"fixed_version": "3.8.13-r0",
"provider_record_id": "ALPINE-CVE-2026-3833"
},
{
"name": "gnutls",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.8.13-r0"
}
]
}
],
"release": "3.24",
"versions": [],
"ecosystem": "apk",
"fixed_version": "3.8.13-r0",
"provider_record_id": "ALPINE-CVE-2026-3833"
},
{
"name": "gnutls",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.3.27-3.21.1"
}
]
}
],
"release": "linux enterprise server ltss extended security 12 sp5",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "3.3.27-3.21.1",
"provider_record_id": "SUSE-SU-2026:2924-1"
},
{
"name": "gnutls",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.4.17-8.26.1"
}
]
}
],
"release": "linux enterprise server ltss extended security 12 sp5",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "3.4.17-8.26.1",
"provider_record_id": "SUSE-SU-2026:2923-1"
},
{
"name": "gnutls28",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.8.3-1.1ubuntu3.6+Fips1.2"
}
]
}
],
"release": "pro",
"versions": [
"3.8.3-1.1ubuntu3.1+Fips1",
"3.8.3-1.1ubuntu3.4+Fips1",
"3.8.3-1.1ubuntu3.4+Fips1.1",
"3.8.3-1.1ubuntu3.5+Fips1.1"
],
"ecosystem": "deb",
"fixed_version": "3.8.3-1.1ubuntu3.6+Fips1.2",
"provider_record_id": "UBUNTU-CVE-2026-3833"
},
{
"name": "gnutls28",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.7.3-4ubuntu1.9"
}
]
}
],
"release": "22.04",
"versions": [
"3.7.1-5ubuntu1",
"3.7.2-2ubuntu1",
"3.7.2-4ubuntu1",
"3.7.2-5ubuntu1",
"3.7.3-4ubuntu1",
"3.7.3-4ubuntu1.1",
"3.7.3-4ubuntu1.2",
"3.7.3-4ubuntu1.3",
"3.7.3-4ubuntu1.4",
"3.7.3-4ubuntu1.5",
"3.7.3-4ubuntu1.6",
"3.7.3-4ubuntu1.7",
"3.7.3-4ubuntu1.8"
],
"ecosystem": "deb",
"fixed_version": "3.7.3-4ubuntu1.9",
"provider_record_id": "UBUNTU-CVE-2026-3833"
},
{
"name": "gnutls28",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.8.3-1.1ubuntu3.6"
}
]
}
],
"release": "24.04",
"versions": [
"3.8.1-4ubuntu1",
"3.8.1-4ubuntu6",
"3.8.1-4ubuntu7",
"3.8.3-1ubuntu1",
"3.8.3-1.1ubuntu2",
"3.8.3-1.1ubuntu3",
"3.8.3-1.1ubuntu3.1",
"3.8.3-1.1ubuntu3.2",
"3.8.3-1.1ubuntu3.3",
"3.8.3-1.1ubuntu3.4",
"3.8.3-1.1ubuntu3.5"
],
"ecosystem": "deb",
"fixed_version": "3.8.3-1.1ubuntu3.6",
"provider_record_id": "UBUNTU-CVE-2026-3833"
},
{
"name": "gnutls28",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.8.9-3ubuntu2.2"
}
]
}
],
"release": "25.10",
"versions": [
"3.8.9-2ubuntu3",
"3.8.9-3ubuntu1",
"3.8.9-3ubuntu2",
"3.8.9-3ubuntu2.1"
],
"ecosystem": "deb",
"fixed_version": "3.8.9-3ubuntu2.2",
"provider_record_id": "UBUNTU-CVE-2026-3833"
},
{
"name": "gnutls28",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.8.12-2ubuntu1.1"
}
]
}
],
"release": "26.04",
"versions": [
"3.8.9-3ubuntu2",
"3.8.10-3ubuntu1",
"3.8.12-2ubuntu1"
],
"ecosystem": "deb",
"fixed_version": "3.8.12-2ubuntu1.1",
"provider_record_id": "UBUNTU-CVE-2026-3833"
}
]
}OpenFactory catalog packages
Matching against OpenFactory catalog package versions is in progress.
[Debian 12 (Bookworm)]
- [gnutls-bin]Unknown
Source package: [gnutls28]
Details (4)
3.7.9-2+deb12u7· amd64 · bookwormFixed · Fixed:
3.7.9-2+deb12u7nvd · gnutls28 · debian · bookworm; nvd · gnutls28 · debian · 12
3.7.9-2+deb12u7· arm64 · bookwormFixed · Fixed:
3.7.9-2+deb12u7nvd · gnutls28 · debian · bookworm; nvd · gnutls28 · debian · 12
3.7.9-2+deb12u7· amd64 · bookworm-securityFixed · Fixed:
3.7.9-2+deb12u7nvd · gnutls28 · debian · bookworm; nvd · gnutls28 · debian · 12
3.7.9-2+deb12u7· arm64 · bookworm-securityFixed · Fixed:
3.7.9-2+deb12u7nvd · gnutls28 · debian · bookworm; nvd · gnutls28 · debian · 12
- [gnutls-doc]Unknown
Source package: [gnutls28]
Details (4)
3.7.9-2+deb12u7· all · bookwormFixed · Fixed:
3.7.9-2+deb12u7nvd · gnutls28 · debian · bookworm; nvd · gnutls28 · debian · 12
3.7.9-2+deb12u7· all · bookwormFixed · Fixed:
3.7.9-2+deb12u7nvd · gnutls28 · debian · bookworm; nvd · gnutls28 · debian · 12
3.7.9-2+deb12u7· all · bookworm-securityFixed · Fixed:
3.7.9-2+deb12u7nvd · gnutls28 · debian · bookworm; nvd · gnutls28 · debian · 12
3.7.9-2+deb12u7· all · bookworm-securityFixed · Fixed:
3.7.9-2+deb12u7nvd · gnutls28 · debian · bookworm; nvd · gnutls28 · debian · 12
- [guile-gnutls]Unknown
Source package: [gnutls28]
Details (4)
3.7.9-2+deb12u7· amd64 · bookwormFixed · Fixed:
3.7.9-2+deb12u7nvd · gnutls28 · debian · bookworm; nvd · gnutls28 · debian · 12
3.7.9-2+deb12u7· arm64 · bookwormFixed · Fixed:
3.7.9-2+deb12u7nvd · gnutls28 · debian · bookworm; nvd · gnutls28 · debian · 12
3.7.9-2+deb12u7· amd64 · bookworm-securityFixed · Fixed:
3.7.9-2+deb12u7nvd · gnutls28 · debian · bookworm; nvd · gnutls28 · debian · 12
3.7.9-2+deb12u7· arm64 · bookworm-securityFixed · Fixed:
3.7.9-2+deb12u7nvd · gnutls28 · debian · bookworm; nvd · gnutls28 · debian · 12
- [libgnutls28-dev]Unknown
Source package: [gnutls28]
Details (4)
3.7.9-2+deb12u7· amd64 · bookwormFixed · Fixed:
3.7.9-2+deb12u7nvd · gnutls28 · debian · bookworm; nvd · gnutls28 · debian · 12
3.7.9-2+deb12u7· arm64 · bookwormFixed · Fixed:
3.7.9-2+deb12u7nvd · gnutls28 · debian · bookworm; nvd · gnutls28 · debian · 12
3.7.9-2+deb12u7· amd64 · bookworm-securityFixed · Fixed:
3.7.9-2+deb12u7nvd · gnutls28 · debian · bookworm; nvd · gnutls28 · debian · 12
3.7.9-2+deb12u7· arm64 · bookworm-securityFixed · Fixed:
3.7.9-2+deb12u7nvd · gnutls28 · debian · bookworm; nvd · gnutls28 · debian · 12
- [libgnutls30]Unknown
Source package: [gnutls28]
Details (4)
3.7.9-2+deb12u7· amd64 · bookwormFixed · Fixed:
3.7.9-2+deb12u7nvd · gnutls28 · debian · bookworm; nvd · gnutls28 · debian · 12
3.7.9-2+deb12u7· arm64 · bookwormFixed · Fixed:
3.7.9-2+deb12u7nvd · gnutls28 · debian · bookworm; nvd · gnutls28 · debian · 12
3.7.9-2+deb12u7· amd64 · bookworm-securityFixed · Fixed:
3.7.9-2+deb12u7nvd · gnutls28 · debian · bookworm; nvd · gnutls28 · debian · 12
3.7.9-2+deb12u7· arm64 · bookworm-securityFixed · Fixed:
3.7.9-2+deb12u7nvd · gnutls28 · debian · bookworm; nvd · gnutls28 · debian · 12
- [libgnutls-dane0]Unknown
Source package: [gnutls28]
Details (4)
3.7.9-2+deb12u7· amd64 · bookwormFixed · Fixed:
3.7.9-2+deb12u7nvd · gnutls28 · debian · bookworm; nvd · gnutls28 · debian · 12
3.7.9-2+deb12u7· arm64 · bookwormFixed · Fixed:
3.7.9-2+deb12u7nvd · gnutls28 · debian · bookworm; nvd · gnutls28 · debian · 12
3.7.9-2+deb12u7· amd64 · bookworm-securityFixed · Fixed:
3.7.9-2+deb12u7nvd · gnutls28 · debian · bookworm; nvd · gnutls28 · debian · 12
3.7.9-2+deb12u7· arm64 · bookworm-securityFixed · Fixed:
3.7.9-2+deb12u7nvd · gnutls28 · debian · bookworm; nvd · gnutls28 · debian · 12
- [libgnutls-openssl27]Unknown
Source package: [gnutls28]
Details (4)
3.7.9-2+deb12u7· amd64 · bookwormFixed · Fixed:
3.7.9-2+deb12u7nvd · gnutls28 · debian · bookworm; nvd · gnutls28 · debian · 12
3.7.9-2+deb12u7· arm64 · bookwormFixed · Fixed:
3.7.9-2+deb12u7nvd · gnutls28 · debian · bookworm; nvd · gnutls28 · debian · 12
3.7.9-2+deb12u7· amd64 · bookworm-securityFixed · Fixed:
3.7.9-2+deb12u7nvd · gnutls28 · debian · bookworm; nvd · gnutls28 · debian · 12
3.7.9-2+deb12u7· arm64 · bookworm-securityFixed · Fixed:
3.7.9-2+deb12u7nvd · gnutls28 · debian · bookworm; nvd · gnutls28 · debian · 12
- [libgnutlsxx30]Unknown
Source package: [gnutls28]
Details (4)
3.7.9-2+deb12u7· amd64 · bookwormFixed · Fixed:
3.7.9-2+deb12u7nvd · gnutls28 · debian · bookworm; nvd · gnutls28 · debian · 12
3.7.9-2+deb12u7· arm64 · bookwormFixed · Fixed:
3.7.9-2+deb12u7nvd · gnutls28 · debian · bookworm; nvd · gnutls28 · debian · 12
3.7.9-2+deb12u7· amd64 · bookworm-securityFixed · Fixed:
3.7.9-2+deb12u7nvd · gnutls28 · debian · bookworm; nvd · gnutls28 · debian · 12
3.7.9-2+deb12u7· arm64 · bookworm-securityFixed · Fixed:
3.7.9-2+deb12u7nvd · gnutls28 · debian · bookworm; nvd · gnutls28 · debian · 12
[Debian 13 (Trixie)]
- [gnutls-bin]Unknown
Source package: [gnutls28]
Details (4)
3.8.9-3+deb13u4· amd64 · trixieFixed · Fixed:
3.8.9-3+deb13u4nvd · gnutls28 · debian · 13
3.8.9-3+deb13u4· arm64 · trixieFixed · Fixed:
3.8.9-3+deb13u4nvd · gnutls28 · debian · 13
3.8.9-3+deb13u4· amd64 · trixie-securityFixed · Fixed:
3.8.9-3+deb13u4nvd · gnutls28 · debian · 13
3.8.9-3+deb13u4· arm64 · trixie-securityFixed · Fixed:
3.8.9-3+deb13u4nvd · gnutls28 · debian · 13
- [gnutls-doc]Unknown
Source package: [gnutls28]
Details (4)
3.8.9-3+deb13u4· all · trixieFixed · Fixed:
3.8.9-3+deb13u4nvd · gnutls28 · debian · 13
3.8.9-3+deb13u4· all · trixieFixed · Fixed:
3.8.9-3+deb13u4nvd · gnutls28 · debian · 13
3.8.9-3+deb13u4· all · trixie-securityFixed · Fixed:
3.8.9-3+deb13u4nvd · gnutls28 · debian · 13
3.8.9-3+deb13u4· all · trixie-securityFixed · Fixed:
3.8.9-3+deb13u4nvd · gnutls28 · debian · 13
- [libgnutls28-dev]Unknown
Source package: [gnutls28]
Details (4)
3.8.9-3+deb13u4· amd64 · trixieFixed · Fixed:
3.8.9-3+deb13u4nvd · gnutls28 · debian · 13
3.8.9-3+deb13u4· arm64 · trixieFixed · Fixed:
3.8.9-3+deb13u4nvd · gnutls28 · debian · 13
3.8.9-3+deb13u4· amd64 · trixie-securityFixed · Fixed:
3.8.9-3+deb13u4nvd · gnutls28 · debian · 13
3.8.9-3+deb13u4· arm64 · trixie-securityFixed · Fixed:
3.8.9-3+deb13u4nvd · gnutls28 · debian · 13
- [libgnutls30t64]Unknown
Source package: [gnutls28]
Details (4)
3.8.9-3+deb13u4· amd64 · trixieFixed · Fixed:
3.8.9-3+deb13u4nvd · gnutls28 · debian · 13
3.8.9-3+deb13u4· arm64 · trixieFixed · Fixed:
3.8.9-3+deb13u4nvd · gnutls28 · debian · 13
3.8.9-3+deb13u4· amd64 · trixie-securityFixed · Fixed:
3.8.9-3+deb13u4nvd · gnutls28 · debian · 13
3.8.9-3+deb13u4· arm64 · trixie-securityFixed · Fixed:
3.8.9-3+deb13u4nvd · gnutls28 · debian · 13
- [libgnutls-dane0t64]Unknown
Source package: [gnutls28]
Details (4)
3.8.9-3+deb13u4· amd64 · trixieFixed · Fixed:
3.8.9-3+deb13u4nvd · gnutls28 · debian · 13
3.8.9-3+deb13u4· arm64 · trixieFixed · Fixed:
3.8.9-3+deb13u4nvd · gnutls28 · debian · 13
3.8.9-3+deb13u4· amd64 · trixie-securityFixed · Fixed:
3.8.9-3+deb13u4nvd · gnutls28 · debian · 13
3.8.9-3+deb13u4· arm64 · trixie-securityFixed · Fixed:
3.8.9-3+deb13u4nvd · gnutls28 · debian · 13
- [libgnutls-openssl27t64]Unknown
Source package: [gnutls28]
Details (4)
3.8.9-3+deb13u4· amd64 · trixieFixed · Fixed:
3.8.9-3+deb13u4nvd · gnutls28 · debian · 13
3.8.9-3+deb13u4· arm64 · trixieFixed · Fixed:
3.8.9-3+deb13u4nvd · gnutls28 · debian · 13
3.8.9-3+deb13u4· amd64 · trixie-securityFixed · Fixed:
3.8.9-3+deb13u4nvd · gnutls28 · debian · 13
3.8.9-3+deb13u4· arm64 · trixie-securityFixed · Fixed:
3.8.9-3+deb13u4nvd · gnutls28 · debian · 13
Observed:
References
- [https://access.redhat.com/errata/RHSA-2026:13274]
- [https://access.redhat.com/errata/RHSA-2026:20611]
- [https://access.redhat.com/errata/RHSA-2026:20612]
- [https://access.redhat.com/errata/RHSA-2026:20613]
- [https://access.redhat.com/errata/RHSA-2026:26319]
- [https://access.redhat.com/errata/RHSA-2026:26409]
- [https://access.redhat.com/errata/RHSA-2026:29197]
- [https://access.redhat.com/errata/RHSA-2026:30004]
- [https://access.redhat.com/errata/RHSA-2026:30849]
- [https://access.redhat.com/errata/RHSA-2026:30850]
- [https://access.redhat.com/errata/RHSA-2026:32962]
- [https://access.redhat.com/errata/RHSA-2026:33125]
- [https://access.redhat.com/errata/RHSA-2026:41921]
- [https://access.redhat.com/errata/RHSA-2026:43575]
- [https://access.redhat.com/errata/RHSA-2026:57402]
- [https://access.redhat.com/errata/RHSA-2026:58981]
- [https://access.redhat.com/errata/RHSA-2026:59831]
- [https://access.redhat.com/errata/RHSA-2026:60019]
- [https://access.redhat.com/errata/RHSA-2026:62409]
- [https://access.redhat.com/errata/RHSA-2026:62549]
- [https://access.redhat.com/errata/RHSA-2026:65839]
- [https://access.redhat.com/errata/RHSA-2026:65851]
- [https://access.redhat.com/errata/RHSA-2026:67857]
- [https://access.redhat.com/errata/RHSA-2026:72502]
- [https://access.redhat.com/errata/RHSA-2026:74674]
- [https://access.redhat.com/errata/RHSA-2026:82304]
- [https://access.redhat.com/errata/RHSA-2026:82322]
- [https://access.redhat.com/errata/RHSA-2026:82347]
- [https://access.redhat.com/errata/RHSA-2026:82354]
- [https://access.redhat.com/errata/RHSA-2026:82372]
- [https://access.redhat.com/errata/RHSA-2026:82857]
- [https://access.redhat.com/errata/RHSA-2026:82888]
- [https://access.redhat.com/security/cve/CVE-2026-3833]
- [https://bugzilla.redhat.com/show_bug.cgi?id=2445763]
- [https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_10691-1.json]
- [https://gitlab.com/gnutls/gnutls/-/issues/1803]
- [https://nvd.nist.gov/vuln/detail/CVE-2026-3833]
- [https://osv.dev/vulnerability/ALPINE-CVE-2026-3833]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2026-3833]
- [https://osv.dev/vulnerability/SUSE-SU-2026:2923-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:2924-1]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2026-3833]
- [https://security-tracker.debian.org/tracker/CVE-2026-3833]
- [https://ubuntu.com/security/notices/USN-8284-1]
- [https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3043.json]
[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]